Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3580c73e-3983-343f-8ce4-4f5097305bc9.roa
File: 3580c73e-3983-343f-8ce4-4f5097305bc9.roa (raw, json)
Hash identifier: sFgYWZL+Vh4dQ8Mk+O4tt2rk0eCwIKzDupdJFpJMiNk=
Subject key identifier: D3:74:73:C7:99:97:3A:A1:84:AA:FC:A5:7C:C6:57:3B:D8:B1:A5:C3
Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial: 010D0C9F43285848BD20F90DE8554C0F92DCF100
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3580c73e-3983-343f-8ce4-4f5097305bc9.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 397221
IP address blocks: 199.7.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:f9:0d:e8:55:4c:0f:92:dc:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=d732de4b-2b83-444d-8b09-f575191cb7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:d9:ea:b5:6d:29:60:d1:87:d6:85:f7:a2:
02:f0:1a:9b:8f:4e:8f:a4:c2:19:7a:01:c6:7b:97:
cd:c5:fa:0b:a5:1d:2f:ad:96:34:6e:1e:67:3d:4a:
29:36:5e:92:9c:43:51:44:d2:c9:e9:04:ff:10:06:
72:e8:af:40:14:d0:bd:3d:f1:2e:ab:b9:8f:82:f4:
cb:07:f5:0b:c1:13:25:68:46:2d:8a:44:c6:96:9c:
a3:42:28:b1:dc:3c:64:82:4d:da:46:26:4c:2d:ab:
17:8d:3d:70:94:88:3d:ee:27:79:72:16:4c:3b:e7:
0a:0c:82:ed:66:97:af:12:61:0c:c0:fa:5c:39:f4:
32:91:df:c8:38:97:88:3c:7e:3a:4d:bb:9d:6b:b1:
41:e2:4e:98:b8:84:30:f6:16:c1:ee:0a:db:04:75:
16:b0:f1:a9:11:bc:89:18:a6:21:b7:67:27:94:99:
6b:05:ea:76:34:82:a8:1d:79:15:d3:b0:ae:21:b0:
22:f7:85:d0:6f:d9:7f:57:03:47:8a:4f:00:ff:5f:
0c:1b:df:e2:91:ae:1a:43:56:a2:31:53:38:62:fb:
d9:a0:be:4f:8b:e8:d2:f0:09:77:15:cf:83:d8:0c:
8d:93:37:bd:72:15:76:01:c1:bd:51:63:8d:4e:b0:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:73:C7:99:97:3A:A1:84:AA:FC:A5:7C:C6:57:3B:D8:B1:A5:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3580c73e-3983-343f-8ce4-4f5097305bc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
X509v3 Authority Key Identifier:
keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:dd:da:79:3f:96:b0:42:16:50:b9:ad:04:56:9b:ac:2f:b9:
24:ac:51:5e:e6:0b:df:f3:9a:3b:ff:78:f3:e4:b3:c7:e9:2d:
28:c3:9d:53:d4:95:7d:bc:23:2f:b2:de:56:a9:21:e7:59:f4:
72:01:61:90:fb:5d:e7:c4:bc:96:0f:2b:d3:5c:51:32:71:e6:
b0:27:2a:82:3b:4f:10:09:95:0f:9a:e7:a5:3a:85:d4:10:77:
40:6d:09:5f:48:43:07:20:e6:62:f2:15:a5:f1:27:ba:20:50:
6f:d5:be:f0:d6:0a:1e:82:66:17:53:b2:f9:70:38:dd:8d:48:
e9:48:7a:a3:9a:6b:cb:d4:54:1a:8b:81:f7:30:49:6d:23:c4:
88:16:23:55:06:19:48:ef:2f:e8:c7:e0:d7:40:7c:ba:43:d8:
4a:14:2a:f6:df:45:14:45:f6:98:9a:ed:0d:07:30:d7:07:16:
08:65:80:ef:2e:e3:e0:29:58:77:83:ee:ea:9c:60:b2:21:d2:
39:61:a7:27:3f:2b:e1:fd:a8:34:8a:2b:6f:c1:b4:1a:8d:53:
04:55:9b:6c:bb:7a:27:bd:25:3a:5b:84:bf:45:98:d5:ad:46:
85:5f:6a:b9:5d:2b:fc:14:dc:f7:9c:dd:70:36:c4:80:1d:fe:
14:38:cd:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IPkN6FVMD5Lc8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
ZDczMmRlNGItMmI4My00NDRkLThiMDktZjU3NTE5MWNiN2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5rZ6rVtKWDRh9aF96IC8Bqbj06PpMIZegHG
e5fNxfoLpR0vrZY0bh5nPUopNl6SnENRRNLJ6QT/EAZy6K9AFNC9PfEuq7mPgvTL
B/ULwRMlaEYtikTGlpyjQiix3Dxkgk3aRiZMLasXjT1wlIg97id5chZMO+cKDILt
ZpevEmEMwPpcOfQykd/IOJeIPH46Tbuda7FB4k6YuIQw9hbB7grbBHUWsPGpEbyJ
GKYht2cnlJlrBep2NIKoHXkV07CuIbAi94XQb9l/VwNHik8A/18MG9/ika4aQ1ai
MVM4YvvZoL5Pi+jS8Al3Fc+D2AyNkze9chV2AcG9UWONTrCJVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNN0c8eZlzqhhKr8pXzGVzvYsaXDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvMzU4MGM3M2UtMzk4My0z
NDNmLThjZTQtNGY1MDk3MzA1YmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzd2nk/lrBCFlC5rQRWm6wvuSSsUV7mC9/zmjv/ePPks8fpLSjDnVPU
lX28Iy+y3lapIedZ9HIBYZD7XefEvJYPK9NcUTJx5rAnKoI7TxAJlQ+a56U6hdQQ
d0BtCV9IQwcg5mLyFaXxJ7ogUG/VvvDWCh6CZhdTsvlwON2NSOlIeqOaa8vUVBqL
gfcwSW0jxIgWI1UGGUjvL+jH4NdAfLpD2EoUKvbfRRRF9pia7Q0HMNcHFghlgO8u
4+ApWHeD7uqcYLIh0jlhpyc/K+H9qDSKK2/BtBqNUwRVm2y7eie9JTpbhL9FmNWt
RoVfarldK/wU3Pec3XA2xIAd/hQ4zSk=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:32:47 2025 by rpki-client